Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c7dd35-ef0f-4c5e-9ba6-0086a0c4e18c/1/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.mft
File: uNcBr0P9f4bLPgTOOrVC5VnG1Lc.mft (raw, json)
Hash identifier: L4bYIile/GqTqGNdC3BWp0o+LtI2wzYM6J4qXj4NYmY=
Subject key identifier: 4A:66:82:AD:72:7E:52:ED:74:56:1B:FD:92:14:F8:45:AA:A1:92:36
Authority key identifier: B8:D7:01:AF:43:FD:7F:86:CB:3E:04:CE:3A:B5:42:E5:59:C6:D4:B7
Certificate issuer: /CN=b8d701af43fd7f86cb3e04ce3ab542e559c6d4b7
Certificate serial: 019A3422072EC0FABA8186CE3008BA6886F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c7dd35-ef0f-4c5e-9ba6-0086a0c4e18c/1/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.mft
Manifest number: 0CD1
Signing time: Thu 30 Oct 2025 08:00:36 +0000
Manifest this update: Thu 30 Oct 2025 08:00:36 +0000
Manifest next update: Fri 31 Oct 2025 08:00:36 +0000
Files and hashes: 1: c47adC4Bxlaw5597wV2V7KU0TIk.roa (hash: LtdOn5FUGrZ35ebiBFAgNw0wB+y/797Rd6pVef69jvw=)
2: uNcBr0P9f4bLPgTOOrVC5VnG1Lc.crl (hash: N3ik//r9XkYTYXpkSe3yJgWoxy2nAxHLnPDUcSTFk7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/c7dd35-ef0f-4c5e-9ba6-0086a0c4e18c/1/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/c7dd35-ef0f-4c5e-9ba6-0086a0c4e18c/1/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:34:22:07:2e:c0:fa:ba:81:86:ce:30:08:ba:68:86:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d701af43fd7f86cb3e04ce3ab542e559c6d4b7
Validity
Not Before: Oct 30 08:00:36 2025 GMT
Not After : Oct 31 08:00:36 2025 GMT
Subject: CN=4a6682ad727e52ed74561bfd9214f845aaa19236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a4:8c:a1:b0:a1:a6:5f:ef:d8:9d:db:f8:36:
8b:c7:ae:e4:d8:3c:ce:d9:2c:9f:f3:54:c8:c0:eb:
67:0d:43:28:44:01:c4:ef:9f:c6:41:2a:09:3b:0d:
04:ce:2a:d7:bb:1c:c9:ba:2b:aa:97:79:19:07:7e:
da:9b:cb:f5:54:b6:a0:09:b1:55:f4:33:5a:d4:90:
9b:9c:7d:46:3d:31:1e:80:94:01:bd:c6:76:ee:e7:
65:a0:b7:3f:97:04:d8:a6:e5:6c:fd:52:d7:c3:a4:
35:1f:e0:da:a8:9f:1f:62:dd:84:ad:0c:5c:ce:59:
42:45:ff:0c:5c:12:0c:ac:19:71:22:f7:e2:40:a1:
85:43:53:16:cb:77:8f:bb:96:47:7a:9c:00:f0:e8:
85:9f:55:9b:7b:06:3b:2e:68:98:13:dc:a2:b0:4e:
65:7a:b8:c1:dd:76:ab:61:2b:6e:90:a0:c1:a0:9f:
d0:8b:5d:b0:6a:c4:a9:bc:3b:71:93:0e:4d:6d:5a:
1a:e1:7d:fd:3d:8f:3d:94:d1:9e:45:32:27:43:26:
f8:67:b5:c0:c0:3f:13:0d:d2:41:d0:d9:1f:a9:53:
69:40:9d:17:b5:78:e4:33:a3:c6:93:14:b5:8d:31:
6c:50:2c:5c:55:d0:34:1a:9c:3b:b5:5b:32:75:87:
ba:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:66:82:AD:72:7E:52:ED:74:56:1B:FD:92:14:F8:45:AA:A1:92:36
X509v3 Authority Key Identifier:
keyid:B8:D7:01:AF:43:FD:7F:86:CB:3E:04:CE:3A:B5:42:E5:59:C6:D4:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c7dd35-ef0f-4c5e-9ba6-0086a0c4e18c/1/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c7dd35-ef0f-4c5e-9ba6-0086a0c4e18c/1/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:54:17:95:0c:c1:72:76:f3:f1:75:fa:9f:c5:b3:41:f7:14:
df:18:7e:58:f2:13:3b:dc:f3:ba:12:35:17:a9:44:5a:c1:2b:
99:5e:e9:f5:71:a0:2d:e4:a3:70:6a:c4:14:aa:d0:d4:ba:eb:
b5:c0:9c:e0:a1:67:ea:d3:f4:ac:f4:02:50:1f:be:bf:e2:58:
ea:5a:30:34:3d:88:e4:2e:1a:bf:5f:9c:49:33:23:7f:75:91:
e4:6b:73:e8:1c:8e:e8:c5:7f:14:33:af:ce:21:9a:05:af:28:
5f:28:08:41:95:c1:ce:60:93:3a:5e:f0:35:ac:ee:0d:cc:dc:
3e:29:35:53:45:a9:3b:7c:70:07:7d:7f:e4:26:27:47:8f:7a:
30:5f:be:12:f2:ee:cf:c9:2d:2b:ea:18:ce:df:a5:4f:cc:45:
7e:93:46:1a:26:8a:d2:f1:00:a1:0a:75:35:8d:39:39:5b:d4:
7f:13:ae:6f:7e:e4:b6:b3:2d:e0:ee:74:5e:f2:6a:c7:db:5f:
0e:17:20:db:8a:5a:e4:f1:7f:af:35:86:80:27:1e:9a:3e:c6:
77:9a:3d:ee:c3:95:6e:c2:6e:51:c3:13:22:95:42:f9:95:8a:
63:0e:5a:9d:d0:fe:2a:c7:d9:a0:6a:71:58:10:5a:bd:3a:0d:
3e:b2:dd:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 14:55:29 2025 by rpki-client